Two separate security researchers report being dismissed or banned after flagging vulnerabilities to LuckyFun, raising questions about the platform's security posture.

Second security researcher comes forward with dismissal story

@GambaAvero reports discovering an Email Flooding Vulnerability in LuckyFun's Discord a month ago. The team fixed it but later refused to pay and ignored him. This mirrors @exxoticxH1's earlier report of being told 'We are not interested sorry' after submitting a security bug, then being banned from the Discord server when asking why his ticket was closed.

Avero@GambaAvero

negative2h ago

@exxoticxH1 @luckyfun @alexchenn @internlucky Damn, should’ve seen this tweet earlier. I reported an Email Flooding Vulnerability a month ago in their Discord. They fixed it, then ignored me a few weeks later saying they weren’t paying.

Second security researcher comes forward with dismissal story

@GambaAvero reports discovering an Email Flooding Vulnerability in LuckyFun's Discord a month ago. The team fixed it but later refused to pay and ignored him. This mirrors @exxoticxH1's earlier report of being told 'We are not interested sorry' after submitting a security bug, then being banned from the Discord server when asking why his ticket was closed.

Avero@GambaAvero

negative2h ago

@exxoticxH1 @luckyfun @alexchenn @internlucky Damn, should’ve seen this tweet earlier. I reported an Email Flooding Vulnerability a month ago in their Discord. They fixed it, then ignored me a few weeks later saying they weren’t paying.